17 ms·
Some sites let the user provide a email address in order to allow password reset, but don't force it. I think this is a good practice.
by mscharrer 11y ago
Some sites let the user provide a email address in order to allow password reset, but don't force it. I think this is a good practice.
- soft_dev_person 11y agoIf you have any kind of non-tech savvy users, it's a terrible practice, as you would be flooded with support requests on how to get into their accounts with no way of verifiying the actual owner.
- markyc 11y agoyes.. even having an unconfirmed email address can get really messy when you need to get in touch with someone but just can't because the address is invalid
- yoz-y 11y agoMarco Arment has had problems with this and resumed it quite nicely in the Overcast FAQ (scroll a bit down for the relevant part): https://overcast.fm/skeptics_faq https://overcast.fm/skeptics_faq